Behavioral task
behavioral1
Sample
17ed9983ef63a462d4f5b8e39b2860a5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
17ed9983ef63a462d4f5b8e39b2860a5_JaffaCakes118
-
Size
160KB
-
MD5
17ed9983ef63a462d4f5b8e39b2860a5
-
SHA1
0b6caaad8f1e0418b17bc04ed30e61f4876bb464
-
SHA256
b6f6a2d1f7f71633b9a052a17ce3f0db0c56f95d9c6e4ad60404d2ef25d715b5
-
SHA512
10536fccb39c2a722cdf9c056b14eb66e80e5a6e2967da27ae44916e7a8107d13b7fc1dd984c95e0998cd9742d43dc7eccf30abc50235a066b9c719199e7919f
-
SSDEEP
3072:ebmyMzzVgs6wZeTs1Q0sN856wRIuAbUs1fIuw7sbN/Kh2z:ebPsgfOHpgw2RUsxDd9w0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 17ed9983ef63a462d4f5b8e39b2860a5_JaffaCakes118 unpack001/out.upx
Files
-
17ed9983ef63a462d4f5b8e39b2860a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ